AMENDMENT ( S) TO THE CLAIMS 

..1 . (Currently amended) A method for creating a protected 
region of a data storage device of a computational device, the 
protected region being a region within which data cannot be 
accessed without proper authorization, operating system data 
representing the operating system of the computational device 
being stored on the data storage device, the method comprising 
the steps of: 

maintaining a record of operating system data accessed 
by the computatibnal device after a reset of the 
computational device and until predetermined functionality 
of the operating system becomes available; and 

establishing & protected and unprotected region regions 
of the data storage device, the step of establishing further 
comprising the steps of: 

storing a copy of the operating system data 
recorded during the step of maintaining in the 
unprotected region of the data storage device; and 

storing a copy of any protected data stored on the 
data storage device in the protected region of the data 
storage device , wherein the protected data comprises 
the operating system data and any other data to which 
it is desired to prevent access without proper 
authorization . 



- 3 - 



2. ' .(New) A method as in Claim 1, wherein the step of 
storing protected data in the protected region of the data 
storage device comprises storing all data stored on the data 
storage device, other than the copy, of operating 'system data 
stored in the unprotected region of the data storage device, in 
the protected region of the data storage device. 

3. (New) A method as in Claim 1, wherein the predetermined 
functionality comprises enablement of communication with the data 
storage device . 

4. (New) A method as in Claim 3, wherein the predetermined 
functionality comprises enablement of user interface 
functionality and enablement of token support functionality. 

5. (New) A method as in Claim 4, wherein the predetermined 
functionality comprises enablement of specification of one or 
more data protection parameters. 

6. (New) Apparatus for creating a protected region of a 
data storage device of a computational device, the protected 
region being a region within which data cannot be accessed 
without proper authorization, operating system data representing 
the operating system of the computational device being stored on 
the data storage device, the apparatus comprising: 

means for maintaining a record of operating system data 
accessed by the computational device after a reset of the 
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computational device and until predetermined functionality 
of the operating system becomes available; .and 

. means for establishing protected and unprotected 
regions of the data storage device, the means for 
establishing further comprising: 

means for storing a copy of the operating system 
data recorded during the step of maintaining in the ■ 
unprotected region of the data storage device; and 

means 'for storing protected data in the protected 
region of the data storage device, wherein the 
protected data comprises the operating system data and 
any other data to which it is desired to prevent access 
without proper authorization. 

7. (New) A computer readable medium or media encoded with 
one or more computer programs and/or data structures for creating 
a protected region of a data storage device of a computational 
device, the protected region being a region within which data 
cannot be accessed without proper authorization, operating system 
data representing the' operating system of the computational 
device being stored on the data storage device, the one or more 
computer programs and/or data structures comprising: 

instructions and/or data for maintaining a record of 
operating system data accessed by the computational device 
after a reset of the computational device and until 
predetermined functionality of the operating system becomes 
available; and 
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instructions and/or data for establishing protected and 
unprotected regions of the dat^a storage device, the 
instructions and/or data for establishing further 
comprising: 

instructions and/or data for storing a copy of the. 
operating system data recorded during the step of 
maintaining in the unprotected region of the data 
storage device; and 

instructions and/or data for storing protected 
data in the protected region of the data storage 
device, wherein the protected data comprises the 
operating system data and any other data to which it is 
desired to prevent access without proper authorization. 
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